подключение по VPN и проблема с правами в iptables 'filter'

# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples
#AndroidDev PATH
export PATH=$PATH:/AndroidSDK/tools

# If not running interactively, don't do anything
[ -z "$PS1" ] && return

# don't put duplicate lines in the history. See bash(1) for more options
# don't overwrite GNU Midnight Commander's setting of `ignorespace'.
HISTCONTROL=$HISTCONTROL${HISTCONTROL+,}ignoredups
# ... or force ignoredups and ignorespace
HISTCONTROL=ignoreboth

# append to the history file, don't overwrite it
shopt -s histappend

# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)

# check the window size after each command and, if necessary,
# update the values of LINES and COLUMNS.
shopt -s checkwinsize

# make less more friendly for non-text input files, see lesspipe(1)
[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"

# set variable identifying the chroot you work in (used in the prompt below)
if [ -z "$debian_chroot" ] && [ -r /etc/debian_chroot ]; then
    debian_chroot=$(cat /etc/debian_chroot)
fi

# set a fancy prompt (non-color, unless we know we "want" color)
case "$TERM" in
    xterm-color) color_prompt=yes;;
esac

# uncomment for a colored prompt, if the terminal has the capability; turned
# off by default to not distract the user: the focus in a terminal window
# should be on the output of commands, not on the prompt
#force_color_prompt=yes

if [ -n "$force_color_prompt" ]; then
    if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
	# We have color support; assume it's compliant with Ecma-48
	# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
	# a case would tend to support setf rather than setaf.)
	color_prompt=yes
    else
	color_prompt=
    fi
fi

if [ "$color_prompt" = yes ]; then
    PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
else
    PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
fi
unset color_prompt force_color_prompt

# If this is an xterm set the title to user@host:dir
case "$TERM" in
xterm*|rxvt*)
    PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
    ;;
*)
    ;;
esac

# enable color support of ls and also add handy aliases
if [ -x /usr/bin/dircolors ]; then
    test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
    alias ls='ls --color=auto'
    #alias dir='dir --color=auto'
    #alias vdir='vdir --color=auto'

    alias grep='grep --color=auto'
    alias fgrep='fgrep --color=auto'
    alias egrep='egrep --color=auto'
fi

# some more ls aliases
#alias ll='ls -l'
#alias la='ls -A'
#alias l='ls -CF'

# Alias definitions.
# You may want to put all your additions into a separate file like
# ~/.bash_aliases, instead of adding them here directly.
# See /usr/share/doc/bash-doc/examples in the bash-doc package.

if [ -f ~/.bash_aliases ]; then
    . ~/.bash_aliases
fi

# enable programmable completion features (you don't need to enable
# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
# sources /etc/bash.bashrc).
if [ -f /etc/bash_completion ] && ! shopt -oq posix; then
    . /etc/bash_completion
fi

alias alert='notify-send -i gnome-terminal \ "[$?] $(history|tail -n1|sed -e '\''s/^\s*[0-9]\+\s*//;s/;\s*alert$//'\'')"'

# ~/.profile: executed by the command interpreter for login shells.
# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
# exists.
# see /usr/share/doc/bash/examples/startup-files for examples.
# the files are located in the bash-doc package.

# the default umask is set in /etc/profile; for setting the umask
# for ssh logins, install and configure the libpam-umask package.
#umask 022

# if running bash
if [ -n "$BASH_VERSION" ]; then
    # include .bashrc if it exists
    if [ -f "$HOME/.bashrc" ]; then
	. "$HOME/.bashrc"
    fi
fi

# set PATH so it includes user's private bin if it exists
if [ -d "$HOME/bin" ] ; then
    PATH="$HOME/bin:$PATH"
fi

/etc/webmin/package-updates/current.cache:            'name' => 'iptables',
/etc/webmin/package-updates/current.cache:            'update' => 'iptables'
/etc/webmin/module.infos.cache:firewall longdesc=Configure a Linux firewall using iptables. Allows the editing of all tables, chains, rules and options.
/etc/hostapd/hostapd.conf:# bypasses kernel filtering (netfilter/iptables/ebtables). If direct
/etc/init/ufw.conf:# The Uncomplicated Firewall is a front-end for iptables, to make managing a
/etc/bash_completion.d/iptables:# bash completion for iptables
/etc/bash_completion.d/iptables:have iptables &&
/etc/bash_completion.d/iptables:_iptables()
/etc/bash_completion.d/iptables:        COMPREPLY=( $( compgen -W '`iptables $table -nL | \
/etc/bash_completion.d/iptables:                `iptables $table -nL | sed -ne "$chain" \
/etc/bash_completion.d/iptables:                MIRROR SNAT DNAT MASQUERADE `iptables $table -nL | \
/etc/bash_completion.d/iptables:                MARK TOS `iptables $table -nL | sed -ne "$chain" \
/etc/bash_completion.d/iptables:complete -F _iptables iptables
/etc/bash_completion.d/iptables:iptables -A INPUT -p gre -j ACCEPT
/etc/bash_completion.d/iptables:iptables -A INPUT -m tcp -p tcp --dport 1723 -j ACCEPT
grep: /etc/blkid.tab: Нет такого файла или каталога
Двоичный файл /etc/prelink.cache совпадает
/etc/default/ufw:# only enable if using iptables backend
/etc/apparmor/severity.db:/usr/lib/iptables/*	2 8 2
grep: /etc/apparmor.d/disable/usr.bin.firefox-3.5: Нет такого файла или каталога

/home/ee/.bash_history:iptables update
/home/ee/.bash_history:iptables -h
/home/ee/.bash_history:iptables
/home/ee/.bash_history:iptables -h
/home/ee/.bash_history:iptables -l -n
/home/ee/.bash_history:iptables -L -n
/home/ee/.bash_history:sudo iptables
/home/ee/.bash_history:sudo iptables -h
/home/ee/.bash_history:sudo iptables -L
/home/ee/.bash_history:sudo iptables -l -n
/home/ee/.bash_history:sudo iptables -L -n
/home/ee/.bash_history:sudo iptables -F
/home/ee/.bash_history:sudo iptables -X
/home/ee/.bash_history:iptables -h
/home/ee/.bash_history:iptables -V
/home/ee/.bash_history:sudo iptables -L -n
/home/ee/.bash_history:sudo iptables -L
/home/ee/.bash_history:sudo iptables -F
/home/ee/.bash_history:sudo iptables -X
/home/ee/.bash_history:iptables -h
/home/ee/.bash_history:iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
/home/ee/.bash_history:sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
/home/ee/.bash_history:sudo iptables -A INPUT -i eth1 --source 192.168.1.0/24 --match state --state NEW,ESTABLISHED -j ACCEPT
/home/ee/.bash_history:iptables -A OUTPUT -o eth1 --destination 192.168.1.0/24 --match state --state NEW,ESTABLISHED -j ACCEPT
/home/ee/.bash_history:sudo iptables -A OUTPUT -o eth1 --destination 192.168.1.0/24 --match state --state NEW,ESTABLISHED -j ACCEPT
/home/ee/.bash_history:sudo iptables -A FORWARD -i eth1 --source 192.168.1.0/24 --destination 0.0.0.0/0 --match state --state NEW,ESTABLISHED -j ACCEPT
/home/ee/.bash_history:sudo iptables -t nat -A PREROUTING —in-interface eth0
/home/ee/.bash_history:iptables -A INPUT —protocol tcp
/home/ee/.bash_history:iptables -A INPUT -protocol tcp
/home/ee/.bash_history:iptables -A INPUT —source 10.18.15.51
/home/ee/.bash_history:iptables -A INPUT -source 10.18.15.51
/home/ee/.bash_history:iptables -A INPUT -p gre -j ACCEPT
/home/ee/.bash_history:sudo iptables -A INPUT -p gre -j ACCEPT
/home/ee/.bash_history:sudo iptables -A INPUT -m tcp -p tcp --dport 1723 -j ACCEPT
/home/ee/.bash_history:sudo iptables -A INPUT -p gre -j ACCEPT
/home/ee/.bash_history:sudo iptables -A INPUT -m tcp -p tcp --dport 1723 -j ACCEPT
/home/ee/.bash_history:grep -R iptables /etc/profile*
/home/ee/.bash_history:grep -R iptables /etc/profile
/home/ee/.bash_history:sudo grep -R iptables /etc/profile*
/home/ee/.bash_history:sudo grep -r iptables /etc/profile*
/home/ee/.bash_history:sudo grep -R iptables /etc/profile.d
/home/ee/.recently-used.xbel:  <bookmark href="file:///media/sda3/Documents/html/iptables.htm" added="2011-02-05T08:54:36Z" modified="2011-02-05T08:54:36Z" visited="2011-02-05T08:54:36Z">